WASHINGTON, June 24 (Reuters) – A Ukrainian hacker has been sentenced to seven years in prison for his role in a notorious cybercrime group that has stolen millions of credit and debit card details across the United States, the Ministry of Justice announced Thursday.

Andrii Kolpakov, 33, was also ordered to pay $ 2.5 million in restitution after pleading guilty to one count of conspiracy to commit wire fraud and one count to commit hacking, the department said in a press release.

Kolpakov’s lawyer Vadim Glozman said his client was disappointed with the sentence but respected the judge’s ruling.

He said Kolpakov – who has already spent three years in detention after being arrested by police in Spain in 2018 – plans to return to Ukraine after serving the remainder of his sentence.

Kolpakov was sentenced in the Western District of Washington. Glozman said his client is currently in custody in Washington state.

Kolpakov’s gang – nicknamed “FIN7” – is one of the most prolific cybercrime companies in existence. A memo written by US prosecutors said that “no hacking group better embodies the industrialization of cybercrime,” alleging that the gang numbered more than 70 people organized into separate departments and teams, including a unit dedicated to cybercrime. malware creation and another unit made up of hackers. who exploited the machines of the victims.

By way of cover, FIN7 posed as a cybersecurity company called “Combi Security” which claimed to be involved in penetration testing.

Prosecutors say Kolpakov worked for FIN7 from at least April 2016 until his arrest in June 2018 and became a middle manager, leading “a small team of hackers” tasked with breaching victims’ computer systems and training new hires to use FIN7 malware. tools.

Reporting by Raphael Satter Editing by Alistair Bell